Privacy Policy

DigiGhost exists to reduce the amount of you that is sitting on the internet. Collecting more of it than the job requires would defeat the point.

Data we collect

• Account data. Your email address and display name, supplied by Google when you sign in.
• Export contents. The archive you upload and the individual traces parsed out of it — posts, comments, captions, timestamps, and similar records you already own.
• Live scan results. For Instagram, the accessible comments read during a bounded scan, including their observed timestamps and scan coverage details. A live scan may not reach every comment.
• Classification results. The flags, categories, severities, and reasons produced when your traces are analysed, plus the review decisions you make.
• Authenticated session data. You sign in directly on Instagram in a browser DigiGhost runs for you. We use the browser session to read comments Instagram makes available and carry out only deletions you approve; scanning itself deletes nothing and may not reach every comment. We do not intentionally save your typed password as a separate field, but the browser runs on our infrastructure, so we do not promise that the sign-in flow cannot be observed. The captured session is encrypted at rest with a key unique to the job, decrypted only in memory while work runs, and destroyed when the job finishes or the automatic seven-day purge runs.
• Saved sign-ins. If you tick “Remember on this device” when you log in, the username and password you typed are kept in your own browser, encrypted, so a later scan can sign you in for you. They are never sent to DigiGhost's servers except to be typed into the platform's sign-in page at that moment, just like the first time. They are removed when the platform says the password is wrong, when you choose “Forget”, or when you clear your browser's site data. Anyone who can use this browser can run a scan with them, so don't tick it on a shared computer.
• Cookies. gg_guest to keep a guest session's jobs attached to your browser, gg_ref to remember a referral link you arrived through, and an authentication session cookie once you sign in. No advertising or cross-site tracking cookies are set.

Why we use it

• To parse your export or scan accessible Instagram comments and show you what was found.
• To classify traces so you can decide what to keep and what to erase.
• To carry out deletion actions you have explicitly approved.
• To operate accounts, attribute referrals, and keep the service secure and functioning.

Subprocessors

• Vercel — application hosting and request serving.
• Neon — the Postgres database that stores job and account records.
• Vercel Blob — temporary storage for uploaded export files.
• Anthropic — AI classification of trace content to produce flags.
• XposedOrNot or Have I Been Pwned — breach lookups for your sign-in email, only when you run the breach check.
• Brave Search or DuckDuckGo — web searches for your own name, email and usernames, only when you run the web check.
• OpenAI — the browser helper used during the “Beyond your accounts” check, on public pages only.

Retention: erased within seven days

Jobs, uploads, parsed traces, derived classification data, and stored login sessions are automatically erased seven days after the job is created. The browser closes when active scan or deletion work finishes, but the stored login session remains until then. You can delete a job and everything attached to it sooner, from the job page — that stops any deletion in progress, revokes the browser session immediately, and then erases the browser profile or remote browser context, local session files, the uploaded export, and the parsed traces and classifications. We keep a non-identifying record that the purge ran, and nothing else. Account records (email and referral attribution) persist until you ask us to delete your account.

Beyond your accounts (breach and web check)

After your first cleanup you can choose to check where else you show up. Only when you press Check everything, we send your sign-in email to a breach database (XposedOrNot, or Have I Been Pwned), and your Google account name and the usernames read from your own scans to web search engines (Brave Search and DuckDuckGo), to about 23 sites to see whether an account with that username exists, and to people-search sites to see whether they list your name in the state you chose. We store the addresses of pages found, their titles, which of your details matched, and what you did about them. We do not store page contents or what a people-search listing says. Findings are erased 90 days after they were last seen, and you can delete them all at any time from that page. Removal emails are sent by you, from your own email; we never submit a form or send a message in your name. The check is run by an AI investigator (Anthropic’s Claude) that decides what to search and reads public pages about you; where a site needs clicking, it sends a browser helper (an OpenAI model) to public pages only, which never signs in or submits anything but a site’s own search. Your email address is sent to a search engine only if you tick that box before the check; either way the pages found are checked for it on our side, and the AI never sees it. The investigator follows what public pages already tie to you (a school, a club, an event, a project), so it may search those names too, but a page is only listed if your name, username or email is on it, and it never searches other people on their own. It may look up archived copies of such pages at the Internet Archive. The text of those public pages and your approved details are sent to those providers for that purpose; your own comments are not: they are reduced on our servers to a short list of names that recur in them (events, teams, clubs, websites), with contact details and other people’s names removed, and only that list is sent. When you sign in to a platform, whether your password has appeared in a breach is checked in your browser: only the first five characters of a one-way hash of it are sent to Have I Been Pwned, and the result stays on your device.

We do not sell your data

DigiGhost does not sell or share personal information for money or for cross-context behavioural advertising, and never has.

Your rights (GDPR)

If you are in the EEA or UK, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to processing, and to receive a portable copy. Our legal bases are performance of a contract (running the service you asked for) and consent (processing the export you chose to upload). You may withdraw consent at any time by deleting your job data, and you may complain to your local supervisory authority.

Your rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how it is used, and the right to request its deletion. We do not sell personal information, and we will not discriminate against you for exercising any of these rights.

Contact

For any privacy request, including access, deletion, or portability: privacy@goghost.app.